Question No: 134 – (Topic 2)

You need to ensure that an administrator is notified by e-mail if the Event Viewer logs any error.

What should you do from the Event Viewer console?

Create a custom view, and then click the Filter Current Custom View action.

Create a custom view, and then click the Attach Task to This Custom View action.

From the System log, click the Filter Current Log action.

From the System log, select an Error event, and then click the Attach Task to This Event action.

Answer: B

Question No: 135 – (Topic 2)

Your network contains an Active Directory domain. The domain contains a member server named Server1.

Server1 has a single network connection.

You need to log every attempt to connect to Server1 on a restricted port. What should you do?

Change the settings of the private firewall profile.

Change the settings of the domain firewall profile.

Modify the properties of the inbound firewall rules.

Modify the properties of the outbound firewall rules.

Answer: B Explanation:

As per the URL, http://technet.microsoft.com/en- us/library/cc947815(v=ws.10).aspx#bkmk_ToenableWindowsFirewallandconfigurethedefau ltbehavior

The attached questions answer should be Option B, not option C , as logging cannot be set at inbound or outbound level. Only @ Profile level, since the member server is part of the domain.

Open the Group Policy Management Console to Windows Firewall with Advanced Security.

In the details pane, in the Overview section, click Windows Firewall Properties.

For each network location type (Domain, Private, Public), perform the following steps.

Click the tab that corresponds to the network location type.

Under Logging, click Customize.

The default path for the log is %windir%\system32\logfiles\firewall\pfirewall.log. If you want to change this, clear the Not configured check box and type the path to the new location, or click Browse to select a file location.

Important

The location you specify must have permissions assigned that permit the Windows Firewall service to write to the log file.

The default maximum file size for the log is 4,096 kilobytes (KB). If you want to change this, clear the Not configured check box, and type in the new size in KB, or use the up and down arrows to select a size. The file will not grow beyond this size; when the limit is reached, old log entries are deleted to make room for the newly created ones.

Question No: 136 – (Topic 2)

Your network contains a DNS server named DNS1 that runs Windows Server 2008 R2. DNS1 is configured as the DNS server for contoso.com. All client computers are configured to use DNS1 for name resolution.

From a client computer, you run the Ping tool as shown in the exhibit. (Click the Exhibit button.)

You need to ensure that users can use the Ping tool to resolve the IP addresses of internal servers to fully qualified domain names (FQDNs).

What should you do?

Create a GlobalNames zone.

Create a reverse lookup zone.

Create a forward lookup zone.

Enable zone transfers on the contoso.com zone.

Answer: B

Question No: 137 – (Topic 2)

Your network contains a Windows Server Update Services (WSUS) server.

You need to ensure that the WSUS server automatically downloads service packs. What should you do first?

From the Automatic Approvals options, modify the Update Rules list.

From the Automatic Approvals options, modify the Advanced settings.

From the Products and Classifications options, modify the Products settings.

From the Products and Classifications options, modify the Classifications settings.

Answer: D

Question No: 138 – (Topic 2)

Your network contains an Active Directory domain.

You have a print server named Server1 that runs Windows Server 2008 R2. You deploy a new print device and create a shared printer.

You need to ensure that only members of a group named Marketing can print color documents on the new print device. All other users must only be able to print black and white documents on the new print device.